hello 8Geee, pelo back again on your puppies, which i remember. That is something nice for you. There are many that pass and go away without leaving you any souvenir.
I must admit that I don't care of date of release of distros. On the contrary i should say as a french wine, the older are the best
mini-eee2.iso: 133 M this one is running in my isobooter pendrive. AH i like a lot the colours. I will pick up theme to decorate the sad Slacko born last years
Users now don't post a lot.. Linux students can work quiet. No questions posted by newbies about trouble. It looks like only linux people have troubles;.
I feel ad when our Puppy builders don't have any feed back, even from colleagues.
About my screenshot, these things are ubknown. Are they really useful.. I ignore.
Of course i install firefox 17.0.11 ESR, because a brower is the main application when you pay for a wireless connection.
About isobooter, it's really a nice tool to test fast several OS, even Ubuntu.. No longer use virtualbos. These 19k0 do as well, they do even better.

couleurs.jpg

Description

Avidemux 2.5.5 included.

Filesize

71.35 KB

Viewed

838 Time(s)

_________________Passenger Pelo ! don't ask him to repair the aircraft. Don't use him as a demining dog .... pleeease.Last edited by Pelo on Mon 07 Aug 2017, 23:23; edited 3 times in total

EONS 2017B iwith new updates to openssl 1.0.2k, pcap, and tcpdump. All of these have been needed. that cannot be translated. Wo do you speak 8Geee, to your colleagues puppy-builders ? they are busy, no time to spend on other babies than their own..
What does that means these strange words .What to update in my mini ?
My laptop is medion Akoya. no wieless at all available to move, indoor, and outdoor. Kernel 3.4.82 not listed by rcrsn51, for dongles
dommage. I have just bought a battery (expensive) to get outside..

unchained.jpg

Description

iwlwifi obtained thanks to emergency kit at home

Filesize

88.91 KB

Viewed

791 Time(s)

_________________Passenger Pelo ! don't ask him to repair the aircraft. Don't use him as a demining dog .... pleeease.

Recently there has been an update to curl 7.51 --> 7.55. There are security concerns in how the certificates are handled, and a few errors.

NOTE: if you get a "broken link" error in the Updates Package in Slacko 5.7, please
use this link. Answer "Yes" and the Puppy Package Manager will install the update. You may remove the /usr/doc files, and place the "curl7.55_files" in /root/.config into the built_in folder.

Recently I have noticed that YouTube has refused to play in all four spins.

There is a fix for this with a few quirks;
1.) Videos will not play in a new tab.
2.) Videos are not paused at start.
3.) The gear icon at lower right of video must be used to turn off
annotations and autoplay.

By pausing the Vid, the settings in item 3 can be changed. Then resume play.

4.) Open a new tab using the "+" at top of page, and close the other tab.
5.) In the address bar type about:config and click OK
6.) In the search bar type media
7.) Scroll to media.mediasource.enabled and double-click to "TRUE"
8.) Close Firefox
9.) Goto MENU ---> SHUTDOWN and select "Restart Graphical Server"

Step 9. is needed in case FF hangs on closure (it does sometimes when
there are setting changes).

When you connect to the internet you can try the settings at YouTube.
The unsupported whine can be ignored using the "NO THANKS" button.

It figures as soon as the new general updates get U/L for use that two security updates from Uncle Slack are released.

The first one (was) is libxml2 (9/23/17). This does not have a CVE entry, but was discovered internally by Slackware. A symlink is needed after removing the older version. The DOC files can be removed and the .packages file in root can be moved to builtin_files with removal of the most recent version.
----------------------------------------------------
The second is curl7.56 This one has CVE entries and the write up suggests that this one be done.

"Due to a flaw in the string parser for the directory name, a directory name passed without a closing double quote would lead to libcurl not adding a trailing NUL byte to the buffer holding the name. When libcurl would then later access the string, it could read beyond the allocated heap buffer and crash or wrongly access data beyond the buffer, thinking it was part of the path."

As with the first update a symlink is needed, and the .packages file moved. Folks that are directly using CURL might want to keep the DOC files.

The August 2017 version of the FF27 thats installed has a bug/typo in about:config and its an important one...

Change the "4" value in security.tls.version.max to a "3" w/o quotes. It appears that the 4 value DOES NOT imply TLS1.3, but rather recycles to a ZERO setting allowing TLS 1.0 (not secure). And it appears in Edit --> Preferences I left the popup blocker on... thats a nuissance here, and elsewhere when internally re-directing to another page.

A very important update for wi-fi users... Slackware has published the wpa_supplicant update to mitigate "KRACK" vunerabilities. Its about as mandatory as possible, since this is a global failure of wpa_supplicant.

Note that MENU --> Setup --> Updates from Slackware MUST show version 2.6

If it does not, goto MENU --> System --> Puppy Package Manager and click on the crossed wrench

Folks that are still using the elder "mini-eee" version can use the updates posted here for EONS. This particular wifi security update should be applied. And BTW, after accomplishing the update, its a good time to remaster considering BASH (use slacko 13.37 version! ) and WPA2 are fixed.

Slackware has made available an openssl patch from 1.0.2k --> 1.0.2m today. This update proceeds differently than all others due to the 1.0.2 version.

Go to slackware.com --> Security Advisories --> 2017

At or near top of list is the "openssl" update link, click on that.

There are TWO files to D/L, first is the "solibs". It may be underneath the main file.

Highlight with Double-click then right click to COPY
Open a new tab and PASTE the link, then ENTER
Select open with pupzip, and click YES in yellow dialog box.
Puppy Package Manager will install, click yes upon TWO dialog boxes. NOTE there may be a long-ish delay

When done go back to previous tab and repeat these steps for the "openssl" itself.

When done with both D/L's close the browser and disconnect from internet.

There are no symlinks to perform, or unusual things to do. The /usr/doc files may be deleted, and the /tmp zip-files.
In /root move the .packages files ( use <o> button to show the hidden packages file) to built-in and delete the 1.0.2K files.

At this point, a shutdown and reboot can be done, then connect to internet again.

Regards
8Geee_________________Linux user #498913

Some people need to reimagine their thinking.Last edited by 8Geee on Wed 29 Nov 2017, 21:09; edited 1 time in total

Curl 7.57 is newest curl patch available. This fixes improper wildcard use, and SSL reads 'out of bounds'. No symlinks are needed, and the package text file can be moved to built_in folder. DOC files may be discarded, though users of curl-ftp should review them.

LibXcursor has not been updated in slacko5.7 since inception. At this time there is need to correct improper sizing of requests for 32-bit systems. Again, no need for symlinks, and DOC files can be reviewed/tossed. Move the /~.package file to built_in.

EDIT*** libXfont did not appear in the Slackware update in MENU... yet libXfont does exist. Go to Slackware.com --> Security Advisories --> 2017. It is near the top. See the "openssl 1.0.2m" update posting just above for parallel instructions to install.

You cannot post new topics in this forumYou cannot reply to topics in this forumYou cannot edit your posts in this forumYou cannot delete your posts in this forumYou cannot vote in polls in this forumYou cannot attach files in this forumYou can download files in this forum